Last updated: December 5, 2025
Millefiori Aesthetics (“we,” “our,” “us”) is committed to protecting the privacy and security of your personal information and your protected health information (“PHI”). This Privacy Policy explains how we collect, use, disclose, and safeguard information in compliance with the Health Insurance Portability and Accountability Act of 1996 (“HIPAA”), applicable Florida laws, and relevant privacy regulations.
By using our website or receiving services at our clinic, you agree to the terms in this Privacy Policy.
1. Information We Collect
A. Personal Information
We may collect personal information such as:
- Name
- Address
- Email address
- Phone number
- Date of birth
- Payment information
- Appointment details
B. Protected Health Information (PHI)
Collected during consultations or treatments:
- Medical history and intake forms
- Provider assessments and treatment notes
- Diagnosis and treatment information
- Laboratory or pharmacy-related information
- Medications, allergies, and clinical records
C. Website & Technical Data
Collected automatically through cookies or analytics tools:
- Browsing data
- Device information
- IP address
- Pages visited
2. How We Use Your Information
We use information to:
- Provide medical and aesthetic services
- Coordinate treatment with supervising physicians, pharmacies, or labs
- Maintain medical records
- Process payments
- Manage appointments
- Comply with regulatory requirements
We do not sell or rent information.
3. HIPAA Compliance & Safeguards
We follow HIPAA’s Privacy and Security Rules by implementing:
- Administrative safeguards: staff training, minimum-necessary policies, BAAs
- Technical safeguards: encryption, secure EMR systems, access controls
- Physical safeguards: secure storage, restricted access
4. How We Share Information
A. Treatment
We may share PHI with:
- Supervising physicians
- Licensed clinical staff
- Pharmacies
- Laboratories
B. Telehealth Partners
PHI may be shared securely with licensed telehealth partners (e.g., Dr. Well). We do not store telehealth session data outside HIPAA-compliant systems.
C. Business Associates
We use HIPAA-compliant vendors for scheduling, payments, and secure data storage.
D. Legal Disclosures
We disclose information only when legally required.
5. Patient Rights Under HIPAA
Patients have the right to:
- Access their records
- Request corrections
- Request restrictions
- Receive confidential communication
- Request disclosure accounting
- Receive breach notifications
6. Website Accounts
Website accounts do NOT contain PHI. They only allow:
- Appointment booking
- Managing contact info
- Viewing past appointments
7. Cookies & Tracking Technologies
Cookies are used for site performance and analytics. They do not access or store PHI.
8. Data Retention & Destruction
PHI is retained in accordance with HIPAA and Florida law and destroyed securely.
9. Third-Party Links
We are not responsible for third-party site practices.
10. Updates to This Policy
We may update this policy periodically.
11. Contact Information
Millefiori Aesthetics
2116 S Babcock, Melbourne, FL 32901
Email: info@millefioriskincare.com
Phone: (321) 821-4778